Debian Bug report logs - #842548
libmsv: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: libmsv: please make the build reproducible

Date: Sun, 30 Oct 2016 12:34:56 +0100

[Message part 1 (text/plain, inline)]

Source: libmsv
Version: 1.1-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps fileordering
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that libmsv could not be built reproducibly.
It embeds timestamps while gzip-compressing some files, and has
randomly ordered md5sums files.

The attached patch fixes this.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[libmsv.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 842548-close@bugs.debian.org (full text, mbox, reply):

From: Clint Adams <clint@debian.org>

To: 842548-close@bugs.debian.org

Subject: Bug#842548: fixed in libmsv 1.1-3

Date: Sun, 30 Oct 2016 13:20:05 +0000

Source: libmsv
Source-Version: 1.1-3

We believe that the bug you reported is fixed in the latest version of
libmsv, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 842548@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Clint Adams <clint@debian.org> (supplier of updated libmsv package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 30 Oct 2016 08:55:19 -0400
Source: libmsv
Binary: libmsv-dev libmsv1
Architecture: source
Version: 1.1-3
Distribution: unstable
Urgency: medium
Maintainer: Clint Adams <clint@debian.org>
Changed-By: Clint Adams <clint@debian.org>
Description:
 libmsv-dev - Monkeysphere validation library (development files)
 libmsv1    - Monkeysphere validation library
Closes: 842548
Changes:
 libmsv (1.1-3) unstable; urgency=medium
 .
   * Patch from Reiner Herrmann to improve build reproducibility.
     closes: #842548.
Checksums-Sha1:
 678428377d355aea5c4ff17d421c1a08655f1991 2057 libmsv_1.1-3.dsc
 112c74e6c089f0b3f4d2f54291ba02fbc97ab8f6 346005 libmsv_1.1.orig.tar.gz
 b721070e7c30c282b5038db522604e70d50873a0 3068 libmsv_1.1-3.debian.tar.xz
Checksums-Sha256:
 963ce1cf3d2e94b55f4e8aa4b05368cd9c89c9d96c1d70f1828be3566f3410ce 2057 libmsv_1.1-3.dsc
 65a7d020612b98ea833303db316b4b06d443351815b23415c15e76789119c302 346005 libmsv_1.1.orig.tar.gz
 05827de657ef018788aacfeecca246d5630f5543ff3df34b8bb3bd3ac40a3558 3068 libmsv_1.1-3.debian.tar.xz
Files:
 81b1b7f7673e61cd97ef154095e10d4e 2057 libs optional libmsv_1.1-3.dsc
 36cb42dade464957e554db8833f91470 346005 libs optional libmsv_1.1.orig.tar.gz
 40fc4c3fa952ad4948bf8afce71a80e4 3068 libs optional libmsv_1.1-3.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Comment: Debian!
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=Xd6E
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.